{"schema":"vulnpedia.research/1","cve":"CVE-2026-111222","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/abraxas/pfsense-timezone-phpini","tags":["exploit","technical-description","Third Party Advisory"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:23.081Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:23.081Z","url":"https://github.com/abraxas/pfsense-timezone-phpini"},{"source":"nvd","sourceId":"CVE-2026-111222","modified":"2026-10-21T01:17:20.287","url":"https://github.com/abraxas/pfsense-timezone-phpini"}]},{"url":"https://abraxaslabs.tech/research/pfsense-ce-leftovers","tags":["technical-description","Issue Tracking"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:23.081Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:23.081Z","url":"https://abraxaslabs.tech/research/pfsense-ce-leftovers"},{"source":"nvd","sourceId":"CVE-2026-111222","modified":"2026-10-21T01:17:20.287","url":"https://abraxaslabs.tech/research/pfsense-ce-leftovers"}]},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/usr/local/www/system.php#L288","tags":["technical-description","Product"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:23.081Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:23.081Z","url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/usr/local/www/system.php#L288"},{"source":"nvd","sourceId":"CVE-2026-111222","modified":"2026-10-21T01:17:20.287","url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/usr/local/www/system.php#L288"}]},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/system.inc#L2377-L2380","tags":["technical-description","Product"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:23.081Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:23.081Z","url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/system.inc#L2377-L2380"},{"source":"nvd","sourceId":"CVE-2026-111222","modified":"2026-10-21T01:17:20.287","url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/system.inc#L2377-L2380"}]},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/rc.php_ini_setup#L163-L166","tags":["technical-description","Product"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:23.081Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:23.081Z","url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/rc.php_ini_setup#L163-L166"},{"source":"nvd","sourceId":"CVE-2026-111222","modified":"2026-10-21T01:17:20.287","url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/rc.php_ini_setup#L163-L166"}]},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/rc.php_ini_setup#L220","tags":["technical-description","Product"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:23.081Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:23.081Z","url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/rc.php_ini_setup#L220"},{"source":"nvd","sourceId":"CVE-2026-111222","modified":"2026-10-21T01:17:20.287","url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/rc.php_ini_setup#L220"}]},{"url":"https://www.vulncheck.com/advisories/netgate-pfsense-ce-through-2.9.0-php-ini-injection-via-timezone-setting","tags":["third-party-advisory","Third Party Advisory"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:23.081Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:46:23.081Z","url":"https://www.vulncheck.com/advisories/netgate-pfsense-ce-through-2.9.0-php-ini-injection-via-timezone-setting"},{"source":"nvd","sourceId":"CVE-2026-111222","modified":"2026-10-21T01:17:20.287","url":"https://www.vulncheck.com/advisories/netgate-pfsense-ce-through-2.9.0-php-ini-injection-via-timezone-setting"}]},{"source":"euvd","sourceId":"EUVD-2026-102334","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102334","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-102334","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102334"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}